Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRB_ERROR message with error-code 25 (KDC_ERR_PREAUTH_REQUIRED) containing a PA-DATA element with padata-type 2, 3, 11, or 19. Attackers can exploit a parser and analyzer state mismatch where proc_padata() dereferences an uninitialized pa_data_element field selected by the wrong parsing arm, triggering a crash via a single UDP or TCP packet to port 88 without any credentials or prior authentication.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 Zeek Network Security Monitor, Null Pointer Dereference, #CVE-2026-60109 (High) -DC-Jul2026-891 https://dailycve.com/zeek-network-security-monitor-null-pointer-dereference-cve-2026-60109-high-dc-jul2026-891/
Post summary
A newly disclosed high‑severity null pointer dereference vulnerability (CVE‑2026‑60109) has been reported in Zeek Network Security Monitor, with no mention of PoC, exploit, or patch yet.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | zeek | zeek | - | - | - |